https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:21:11.714071+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352405 EUVD-2026-352405 2026-10-06T16:21:11.752947+00:00 EUVD-2026-352405 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19770 fkie_cve-2026-19770 2026-10-06T16:21:11.752985+00:00

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-fhw4-v2hr-j5m2 GHSA-fhw4-v2hr-j5m2 2026-10-06T16:21:11.753020+00:00

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.